UltraTech Writeup

I scanned the machine for open ports with nmap.

The I did a service scan on port 8081 (-p 8081) using the -sV flag of nmap. So I got the first answer.
I moved on to the second question. I already had the answer from the nmap scan I did before. An other service scan on port 31331 and there is the solution to question three and four.

There is a typo in the next question, because port 8080 isn’t open. So pretend it is asked for port 8081.

I used gobuster to fuzz the routes.

Question 5, check!

So, search for the database. When I accessed the webserver, this is what I saw.

A gobuster scan discovers robots.txt, so i took a look at it.

Oh, sitemap.txt? Let’s take a look.

Partners.html seems interesting.

A login panel, yes! Most logins need a database, so it’s the right way.

What happens when we try something around? We get redirected to /auth on port 8081. The hint says, we shouldn’t stay at /auth too long. So I took a look at the second path on port 8081. I messed around with the parameters and it looked like a command injection in the url. So I tried so different methods and ended up with this one:

Wohoo, the database. I read it with cat and got the hash.

Task 4: get root!
I checked for the classics:

but I had no luck at all. But when I looked at the groups I am in, I found something:

GTFOBins says the following about docker:

So, I tried this command but I got an error. I did some researching and you have to change “alpine” to bash and there is the root shell!

Related posts:

Dedicati del tempo. Si, a te stesso. Trova prima il tempo per te, poi per gli altri. Smetti di vivere per gli altri. Inizia a vivere per te stesso. Inizia con poco. Inizia dedicandoti un momento per…

Muscle mass cars and trucks can be found in basically all designs and sizes. That’s what makes selecting a solitary car for acquisition extremely challenging. It might also be more difficult if you…

Reformar tu local en un hogar puede ser una buena idea para bastantes personas que buscan un cambio en su modo de vida o una inversión rentable. En los últimos tiempos, la tendencia de reformar…